diff options
| author | Damien Miller <djm@mindrot.org> | 2019-09-05 03:09:28 +0200 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2019-09-05 06:26:39 +0200 |
| commit | f4846dfc6a79f84bbc6356ae3184f142bacedc24 (patch) | |
| tree | da1324ec5f17b881d6fec177623aeccf90ea7820 /regress | |
| parent | oops; missed including the actual file (diff) | |
| download | openssh-f4846dfc6a79f84bbc6356ae3184f142bacedc24.tar.xz openssh-f4846dfc6a79f84bbc6356ae3184f142bacedc24.zip | |
Fuzzer harness for sshsig
Diffstat (limited to 'regress')
| -rw-r--r-- | regress/misc/fuzz-harness/Makefile | 5 | ||||
| -rw-r--r-- | regress/misc/fuzz-harness/sshsig_fuzz.cc | 35 |
2 files changed, 39 insertions, 1 deletions
diff --git a/regress/misc/fuzz-harness/Makefile b/regress/misc/fuzz-harness/Makefile index a2aa4441f..6ab7d7217 100644 --- a/regress/misc/fuzz-harness/Makefile +++ b/regress/misc/fuzz-harness/Makefile @@ -7,7 +7,7 @@ CXXFLAGS=-O2 -g -Wall -Wextra -I ../../.. $(FUZZ_FLAGS) LDFLAGS=-L ../../.. -L ../../../openbsd-compat -g $(FUZZ_FLAGS) LIBS=-lssh -lopenbsd-compat -lcrypto $(FUZZ_LIBS) -all: pubkey_fuzz sig_fuzz authopt_fuzz +all: pubkey_fuzz sig_fuzz authopt_fuzz sshsig_fuzz .cc.o: $(CXX) $(CXXFLAGS) -c $< -o $@ @@ -21,5 +21,8 @@ sig_fuzz: sig_fuzz.o authopt_fuzz: authopt_fuzz.o $(CXX) -o $@ authopt_fuzz.o ../../../auth-options.o $(LDFLAGS) $(LIBS) +sshsig_fuzz: sshsig_fuzz.o + $(CXX) -o $@ sshsig_fuzz.o ../../../sshsig.o $(LDFLAGS) $(LIBS) + clean: -rm -f *.o pubkey_fuzz sig_fuzz authopt_fuzz diff --git a/regress/misc/fuzz-harness/sshsig_fuzz.cc b/regress/misc/fuzz-harness/sshsig_fuzz.cc new file mode 100644 index 000000000..fe09ccb87 --- /dev/null +++ b/regress/misc/fuzz-harness/sshsig_fuzz.cc @@ -0,0 +1,35 @@ +// cc_fuzz_target test for sshsig verification. + +#include <stddef.h> +#include <stdio.h> +#include <stdint.h> +#include <stdlib.h> +#include <string.h> + +extern "C" { + +#include "includes.h" +#include "sshkey.h" +#include "ssherr.h" +#include "sshbuf.h" +#include "sshsig.h" +#include "log.h" + +int LLVMFuzzerTestOneInput(const uint8_t* sig, size_t slen) +{ + static const char *data = "If everyone started announcing his nose had " + "run away, I don’t know how it would all end"; + struct sshbuf *signature = sshbuf_from(sig, slen); + struct sshbuf *message = sshbuf_from(data, strlen(data)); + struct sshkey *k = NULL; + extern char *__progname; + + log_init(__progname, SYSLOG_LEVEL_QUIET, SYSLOG_FACILITY_USER, 1); + sshsig_verifyb(signature, message, "castle", &k); + sshkey_free(k); + sshbuf_free(signature); + sshbuf_free(message); + return 0; +} + +} // extern |